Trusted Design

FighterPOS – DIY Malware

概要

I would first like to credit TrendMicro with their initial research on FighterPOS. There have been an emegerence of new domains for FighterPOS recently and I discovered a whole load of other possible domains that could be used for the command and control. This particular peice of malware uses a open source VB6 peice of malware called ‘vnLoader’. The author of FighterPOS has either got himself or asked someone else to create a modified version to use as POS malware.

Created: 2026-02-23

Indicators

• domain - lkjhgfdsa02.xyz -
• domain - lkjhgfdsa04.xyz -
• domain - lkjhgfdsa.xyz -
• domain - lkjhgfdsa01.xyz -
• domain - poiuytre.org -
• domain - lkjhgfdsa03.xyz -
• domain - lkjhgfdsa05.xyz -

類似Pulses

• FighterPOS Gets Worm Routine (score: 0.67)
• 20160226A: FighterPOS Gets Worm Routine (score: 0.64)
• BBSRAT Attacks Targeting Russian Orgs Linked to Roaming Tiger (score: 0.60)
• New POS Malware Emerges - Punkey (score: 0.59)
• NitlovePOS: Another New POS Malware (score: 0.59)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る